[108776] in North American Network Operators' Group
RE: New service - the Team Cymru Malware Hash Registry!
daemon@ATHENA.MIT.EDU (Frank Bulk)
Tue Oct 28 18:43:27 2008
From: "Frank Bulk" <frnkblk@iname.com>
To: "'Rob Thomas'" <robt@cymru.com>
In-Reply-To: <49074604.9090006@cymru.com>
Date: Tue, 28 Oct 2008 17:42:49 -0500
Cc: ian@cymru.com, nanog@nanog.org
Reply-To: frnkblk@iname.com
Errors-To: nanog-bounces@nanog.org
Yes, for antivirus checking. I can't direct you on how development on those
plugins could be focused, but I'm sure there are listservs/people who could
help you with that.
I don't have any special inroads, but I'll send you the contact info for
Virustotal offline.
Frank
-----Original Message-----
From: Rob Thomas [mailto:robt@cymru.com]
Sent: Tuesday, October 28, 2008 12:04 PM
To: Frank Bulk
Cc: ian@cymru.com; nanog@nanog.org
Subject: Re: New service - the Team Cymru Malware Hash Registry!
Hi, Frank.
> Interesting idea -- two questions:
Thanks!
> a) Will Cymru be developing any plugins for sendmail and the like that
> facilitate Cymru's MHR to be queried?
We've not done so, but it's an interesting idea. Would it make more
sense to focus on a plugin for sundry anti-spam and anti-virus products
instead?
We have a few more services to release first, though, so stay tuned. :)
> b) Is Cymru cooperating with VirusTotal on this project? They compute
> hashes, too, and it could be a data feed for Cymru's content
We work with with lots of folks, and are happy to work with even more.
Introductions or suggestions are always welcome! Got a name or email
address handy?
Thanks,
Rob.
--
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");